In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

1
vote
0answers
170 views

Routing public IP addresses to customers in a WISP setup

We have a fibre leaseline with a /29 range for our pfSense WAN port 61.179.145.40/29 So the WAN of our pfSense box is 61.179.145.42 with a gateway of 61.179.145.41. Our ISP has also routed 61.179....
2
votes
1answer
98 views

ProFTPD IP masquerade just some ways

I am trying to setup a FTP server using ProFTPD on Xubuntu 15.10. Users will connect to this server in two ways: internally (using an internal IPv4 address) externally (using domain name pointed to ...
0
votes
0answers
27 views

Redirect external ip of server to external ip of virtual machine

I have a server with multiple virtual machines. Let's say this is my server ips: Internal 1.2.3.4 External 5.6.7.8 Now, if i go to 1.2.3.4:8082 it goes to my app (I redirect :8082 to de internal ip ...
2
votes
1answer
76 views

DHCP Server with 2 nics

I have windows 2008 r2 x64 enterprise server with a domain. That server has 2 NIC nic1 which is connected to a router nic2 - here i need 1) run dhcp for private LAN 2) forward internet connection ...
0
votes
0answers
13 views

Reverse proxy, NAT on port 80 and problems to surf web [duplicate]

We have 1 public IP adderss, and some applications that we want to be available outside. I setupped NGINX as a reverse proxy and it worked very well. It's the same IP and port, but the traffic is ...
2
votes
1answer
72 views

AWS Close Ports on Specific Elastic IP Addresses for EC2 Instance

I have a Windows Server in AWS EC2. I have opened ports 80 and 443 to 0.0.0.0/0, and RDP to a private IP address for VPN access. The instance has 4 total elastic IP addresses, each mapping to a ...
0
votes
1answer
36 views

IP NAT from router to SSL-VPN appliance

Has anyone use Cisco 891-K9 to forward 443/SSL to a SSL VPN appliance? (I've never encountered this situation before because either the public facing router terminated VPN directly or we had multiple ...
1
vote
0answers
34 views

VPN with VMware Player [closed]

I have 2 domains, prod and dev. Dev has a 1 way trust from prod (dev trusts prod, but prod does not trust dev). My host computer (laptop, win7 sp1) is a member of the prod domain and can VPN in for ...
1
vote
1answer
43 views

nat and xen, nat only to external ip

I've setup xen that way that all my vm's have a public ip and a private ip (192.168.0.x). However, those vms which don't have a puplic ip should also get internet access so I did setup nat. iptables ...
0
votes
2answers
156 views

How can I use NAT or haproxy to reroute a certain host name?

I have an infrastructure where all requests made by internal subnets have to pass through a server in the "open to the world" subnet, where my NAT instance is (I'm using AWS). I want to create a host ...
0
votes
1answer
75 views

Cannot SSH to ec2 instance in VPC

I'm just starting with AWS, and have 2 ec2 instances running on a VPC, one with a public and private IP, one with only a private IP. I can SSH to both (using my key) if I attach an external IP to ...
0
votes
0answers
16 views

Why would you allow traffic in through a firewall if you aren't NAT'ting it?

Why would you allow traffic from Outside to Inside - i.e. from 9.9.9.9 to WAN_IP of your Firewall Interface, if you then aren't going to do anything with the traffic i.e. NAT it to a given device. ...
0
votes
0answers
33 views

Cisco ASA Static NAT RULE Problem

I need to clarify a one of cisco asa NAT rule. i searched lot and still not found a clear answer. please see below rule • nat (Inside,Outside) source static any any destination static ...
0
votes
1answer
94 views

NAT in Amazon AWS

I am trying to configure NAT in Amazon AWS. So I have two EC2 with private IPs: 10.0.0.49 and 10.0.0.48. (10.0.0.0/24 network) Nodes in one VPC. I can ping 10.0.0.49 from 10.0.0.48. Elastic IP 52.88....
0
votes
0answers
35 views

How to reach a private IP (DHCP enabled) from a public facing IP through NAT?

Lets say we have computers C1 and C2 C2 has two network interfaces C2.eth0(public facing) and C2.eth1 local second physical network (addr:10.10.70.101 and Nw:10.10.70.0) Now, there are multiple ...
1
vote
1answer
26 views

AWS VPC port forwarding on nat

I have 3 instances, one in a VPC private subnet, one NAT instance, and another outside the VPC, which acts as the web server. The instance in the private subnet acts as an app server and the ...
3
votes
1answer
1k views

DNAT port range with different internal port range with Iptables

The standard way of DNATing a single port to a different port on an internal network is something like that: ip(6)tables -t nat -A PREROUTING -i wan0 -p tcp --dport 80 --to-destination 10.0.0.1:8080 ...
0
votes
1answer
18 views

Does STUN work on majority of NATs?

I've been largely ignoring STUN protocol as noise for a while, but I keep encountering it here and there, and I'm wondering of it's general usability. If I understand it right, STUN is only useful if ...
0
votes
1answer
81 views

AWS - HA - Multiple NAT - Single EIP

According to the AWS docs it is possible to setup HA between two EC2 instances, however I would like to use only a single EIP. If you scroll down the page to the section related to elastic ips, the ...
0
votes
0answers
28 views

Can potential conflicts arise between IPtables port blocking and NAT port translation?

I have set my iptables rules to open only some ports for outgoing connections. I also have snat iptables rules to do NAT which I presume will do a local IP to public IP and also a port translation, ...
0
votes
0answers
47 views

Trouble for enable NAT for virtual interface tap0 on Linux

Hi I am having trouble for enable NAT for virtual interface tap0 Situation described as below: I have eth0 interface which has internet i.e ping -I eth0 google.com works Now I have created virtual ...
-3
votes
2answers
903 views

Do I need a managed switch for my home network? [closed]

The benefit to home routers is that all you need to do is plug them in, and they pretty much work out of the box, allowing multiple computers to use a single internet connection. Let's say I wanted ...
2
votes
1answer
333 views

Does the ELB also route outbound reply traffic in AWS

I have been trying to understand how routing works in an AWS VPC with public/private subnets. I have a setup as recommended by amazon with an ELB and NAT in the public subnet and the webserver in the ...
0
votes
0answers
28 views

Cant configure NAT in iptables

Есть два сервера с линукс. Первый выполняет роль роутера, он имеет два сетевых интерфейса, один из которых подключен к интернету, другой к локальной сети. Второй сервер подключен к локальной сети. ...
0
votes
0answers
97 views

CentOs 6 as Firewall, forward traffic from eth1 to eth0 -> destination host prohibited

I'm setting up Firewall with a CentOs 6.0 for testing. I'm doing this on two virtualmachines. First VM (Firewall) has 2 interface: eth0 - connected to NAT with 10.0.2.10, access to internet eth1 - ...
0
votes
0answers
120 views

iptables POSTROUTING DNAT Issue

So I am attempting to do something along these lines but hopefully with a single router instead of two. My network is as follows: Device 1 <--> (Interface A | Interface B) <--> Device 2 ...
1
vote
1answer
62 views

GNU parallel multpile sshlogin nodes behind NAT

Is it possible to have multiple remote nodes behind a NAT with GNU parallel? Suppose some of a GNU parallel cluster exists behind a NAT (which may or may not be accessible only via a single IPv4 ...
0
votes
1answer
50 views

Iptables won't redirect

I'm trying to redirect all tcp traffic on port 102 from a single ip address to another ip address and want to masquerade the ip as well im using this iptable config, but still i cannot connect. ...
0
votes
0answers
63 views

No web access behind Cisco Router - Connection denied due to NAT reverse path failure

I have a small network behind a Cisco ASA 5505. From a computer on the network, I can't even ping 8.8.8.8. Web browsing also fails with a "DNS probe finished no internet" error. I'm getting a lot of "...
1
vote
1answer
739 views

How can I place a Webserver in a private subnet in AWS and open it to the world on port 80

I am trying to setup a highly available AWS Magento deployment. There is a reference deployment here: http://docs.aws.amazon.com/quickstart/latest/magento/architecture.html Based on this, I want to ...
0
votes
0answers
82 views

iptables - forward traffic to VPN client

Following Scenario: Router forwarding traffic on port 80 to Machine A Machine A 192.168.0.254 Running Owncloud on port 80 Connected to VPN Provider Machine B 192.168.0.123 can connect to ...
1
vote
1answer
27 views

How to diagnose what is causing all request to websites hosted on internal network to be redirected to router?

On internal network I have a client and a server. Server is hosting example.com and fake.example.com that are also open to the internet through NAT. Any computer on the internet can access example.com ...
0
votes
1answer
61 views

Public to Public NAT/Routing

We have a set of web services available to our customers. Many of our customers have firewall/proxy exceptions setup to our public IP address. We need to expand and move to a new location. Part of ...
0
votes
2answers
131 views

How to workaround a IP whitelist when consuming a 3rd-party API?

We use a service who's API will reject requests unless the source IP has been previously whitelisted. They only give us 3 slots which is a problem because we have more than 3 machines that need to use ...
0
votes
0answers
99 views

cisco 1800 series NAT with secondary IP

I have some troubles doing NAT. If I set up NAT for a particular port, the server replies, but it does so from a different IP address, (specifically from the main IP). If I set up NAT to B.B.B.B, the ...
0
votes
0answers
646 views

Cisco ASA 5505 cannot ping from inside to outside

Hi everyone and thanks in advance for all the help. I'm having some issue getting my cisco firewall (asa 5505) to ping between zones. The inside zone won't ping with the outside zone and vice versa. ...
0
votes
0answers
66 views

How to implement 1:1 (mapping)NAT like aws does mapping public IP to private IP

I have a machine in private network having it's private IP (lets say 192.168.1.8). I have one server somewhere having public ip (lets say 1.2.1.2) I would like to map this public IP to my private IP ...
4
votes
1answer
206 views

Finding google unusual traffic

We are a small Internet provider. In order to get Internet access we are using NAT (10-20 users per one public IP). And lately we've met with Google blocking services (captcha and full block) and we ...
0
votes
0answers
47 views

iptabels stcp packet not reach nat table

i want to forward sctp packet to my internal network. then i configure forward with -p sctp in nat table. but i found it not work at all. then i add some log to track to see what happen. it's ...
0
votes
1answer
60 views

iptables 1:1 NAT with rules for individual services

I have a working 1:1 NAT setup on CentOS 6.7. But I do not yet have access rules set for various services. How would I enable access to TCP/3389 on the host currently sitting on 192.168.0.149, ...
0
votes
0answers
199 views

web server behind NAT cannot be accessed by the same network using NAT router IP or domain

I have 1 host server as NAT server, it has public domain name example.com tied to its public IP address PUB_IP_ADD. I have another web server behind NAT with IP address 192.168.1.100 and port ...
1
vote
0answers
30 views

ubuntu router intermittently times out

I have an ubuntu 14.04 server working as an internet gateway/router. When I run a continuous ping against a known good address on the internet, I get steady reply with good latency. But sometimes when ...
0
votes
0answers
214 views

Asterisk recieves 403 on every outbound call after 5 minutes delay

I have a home server in my local network with Asterisk installed. It has been working without any problem for several month. I have just changed my router (ZyXel Keenetic Lite -> LP-LINK TL-R480T+) ...
1
vote
1answer
110 views

AWS Private subnet not redirected to NAT Instance

AWS is not setting up properly default gw for instance in private subnet. NAT address: ec2din i-ef7f8a3a|grep PRIVATEIPADDRESS PRIVATEIPADDRESS 172.16.0.31 ROUTING TABLE configuration: ec2drtb ...
1
vote
1answer
213 views

Is it possible to set up WAN connection on a VLAN (Cisco Router)?

I'm trying to set up NAT load balancing (or failover) with two ISPs on my 1941 router. The router has only two WAN ports and 4 EHWIC ports (which are basically switch ports). One of the WAN ports is ...
0
votes
0answers
157 views

NAT problems with OpenVPN + PF OpenBSD

I rented a server to use as a VPN for educational purposes , ok so set up openvpn server and its all working. I can connect to it with my Windows 7 laptop but i won't be able to browse any website ...
1
vote
0answers
88 views

Unable to connect to web server hosted in private subnet of VPC via NAT hosted in public subnet

I have hosted my android/web application on a EC2 instance in the private subnet (10.0.1.0) of my VPC. This instance has apache-tomcat installed on it, but does not have a public IP. I also have a ...
1
vote
1answer
168 views

Asterisk behind Cisco ASA 5505

I'm in the process of upgrading from an old WRT54GL running Tomato to a Cisco ASA 5505, versioning as follows: Cisco Adaptive Security Appliance Software Version 9.1(5)21 Device Manager Version 7.4(...
1
vote
1answer
41 views

IP Address secondary transpose

I am bit new to cisco and I have assigned 5 static IPs to my serial interface 0/0. I have NATed email in via one of the secondary IPs to the server. However, when I try to send mail out it's sending ...
1
vote
0answers
26 views

Vyatta Nat Rule Help Translating From Cisco ASA Rule

I'm fairly new to Vyatta and need advice on how to translate the following rule example from a Cisco ASA to the Vyatta. static (dmz2,outside) 192.168.254.0 192.168.254.0 netmask/24 How do I ...